32600 matches found
CVE-2026-30960
The CVE entry CVE-2026-30960 has a connected advisory GHSA-9C4H-PWMF-M6FJ describing an Arbitrary Code Execution in RSSN via the JIT compilation engine exposed through the CFFI interface. The vulnerability stems from improper input validation and external control of code generation, enabling an a...
CVE-2026-30944 StudioCMS Affected by Privilege Escalation via Insecure API Token Generation
StudioCMS is a server-side-rendered, Astro native, headless content management system. Prior to 0.4.0, the /studiocmsapi/dashboard/api-tokens endpoint allows any authenticated user at least Editor to generate API tokens for any other user, including owner and admin accounts. The endpoint fails to...
CVE-2025-40943
Affected devices do not properly sanitize contents of trace files. This could allow an attacker to inject code through social engineering an authorized user, who has the function right "Read diagnostics", to import a specially crafted trace file. The malicious trace file is insufficiently sanitiz...
CVE-2026-24313
CVE-2026-24313 affects SAP Solution Tools Plug-In (ST-PI). A function module does not perform proper authorization checks for authenticated users, enabling disclosure of system information. According to the provided documentation, the vulnerability has a low confidentiality impact and does not af...
Google Pixel 安全漏洞
The Google Pixel is a smartphone produced by Google Inc. The Google Pixel has a security vulnerability, which stems from a failed precondition check in dhdtcpdatainfoget within dhdip.c, potentially leading to remote denial of service attacks...
The vulnerability of the tc358743_probe() function in the drivers/media/i2c/tc358743.c driver for multimedia devices in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the tc358743probe function in the drivers/media/i2c/tc358743.c file of the Linux kernel’s multimedia device driver is related to incorrect resource initialization. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the tg_tag_type() function in the prdbg.c component of the GNU Binutils development environment allows a hacker to induce a service failure.
The vulnerability of the tgtagtype function in the prdbg.c component of the GNU Binutils development environment is related to an unvalidated return value. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the <img> tag in QML and Qt Quick for Qt6 Declarative allows a attacker to cause a service failure.
The vulnerability of the tag in QML and Qt Quick for Qt6 is related to the provision of unlimited memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the fs/fuse component in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the fs/fuse component in Linux operating systems is related to errors during thread blocking. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the populate_free_space_tree() function in the fs/btrfs/free-space-tree.c file of the Linux kernel operating system allows a hacker to cause a service failure.
The vulnerability of the populatefreespacetree function in the fs/btrfs/free-space-tree.c file of the Linux kernel operating system is related to an uncontrolled, exploitable condition. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the `uiinput_ffUploadToUser()` function in the `drivers/input/misc/uinput.c` driver for Linux operating system input devices allows a hacker to cause a service failure.
The vulnerability of the uiinputffUploadToUser function in the drivers/input/misc/uinput.c file of the Linux input driver module is related to incorrect resource initialization. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the afu_allocate_irqs() function in the drivers/misc/cxl/irq.c module of the Linux kernel allows a attacker to cause a service failure.
The vulnerability of the afuallocateirqs function in the drivers/misc/cxl/irq.c file of the Linux kernel is related to improper memory release memory leak. Exploiting this vulnerability may allow a remote attacker to cause a service failure...
PT-2026-24484
Name of the Vulnerable Software and Affected Versions sigstore-ruby versions prior to 0.2.3 Description The software does not correctly handle verification failures when the artifact digest does not match the digest in the in-toto attestation subject. Specifically, the Sigstore::Verifierverify...
PT-2026-24476
Name of the Vulnerable Software and Affected Versions Sylius versions prior to 2.0.16 Sylius versions prior to 2.1.12 Sylius versions prior to 2.2.3 Description Sylius, an Open Source eCommerce Framework on Symfony, contains a cross-site scripting XSS issue in the shop checkout login form. The...
Istio 信息泄露漏洞
Istio is an open-source platform that connects, manages, and protects microservices. Versions of Istio prior to 1.29.1, 1.28.5, and 1.27.8 have a vulnerability related to information leakage. This vulnerability arises from the JWKS resolver being unavailable or failing to retrieve values, exposin...
PT-2026-24610
In MariaDB server version through 11.8.5, when server audit plugin is enabled with server audit events variable configured with QUERY DCL, QUERY DDL, or QUERY DML filtering, if an authenticated database user invokes a SQL statement prefixed with double-hyphen — or hash style comments, the stateme...
Sigstore 安全漏洞
Sigstore is an open-source software signature verification library developed by sigstore. Versions of Sigstore prior to 0.2.3 contained security vulnerabilities. These vulnerabilities stemmed from the improper propagation of failure messages during the verification process, which could lead to...
The vulnerability of the exsltFuncResultComp() function in the functions.c component of the Libxslt XML analysis library allows a attacker to cause a service failure.
The vulnerability of the exsltFuncResultComp function in the functions.c component of the Libxslt XML analysis library is related to data type conversion errors. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the Linux operating system’s kernel, related to insufficient entropy, allows a hacker to trigger a service failure.
The vulnerability of the Linux operating system’s kernel is related to insufficient entropy. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the escape_byte_string() function in the gio/gfileattribute.c component of the GLib library allows a attacker to cause a service failure.
The vulnerability of the escapebytestring function in the gio/gfileattribute.c library component of the GLib suite is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...